p-edge-browser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent skill invokes Playwright browser automation tools to visit arbitrary user-navigated web pages, exposing the model to external web content at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The configuration instructs the agent to run npx -y @playwright/mcp@latest, which is a remote NPM package installation and execution of an external tool dependency at runtime.